force development to use ssl